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Snowbird is a middleware system based on virtual machine (VM) technology that simplifies the development 
and deployment of bimodal applications. Such applications alternate between phases with heavy 
computational-resource needs and phases rich ... 
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Given a sufficiently good network connection, even a handheld computer can run extremely resource- 
intensive applications by executing the demanding portions on a remote server. At first glance, the 
increasingly ubiquitous deployment of wireless hotspots ... 
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Welcome to the 45th Design Automation Conference and the City of Anaheim I DAC is the prem ier event for 
the electronic design community. It offers the industry's most prestigious technical conference in combination 
with the biggest exhibition. DAC is ... 
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Commodity operating systems entrusted with securing sensitive data are remarkably large and complex, and 
consequently, frequently prone to compromise. To address this limitation, we introduce a virtual-machine- 
based system called Overshadow that protects ... 
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In current commodity systems, applications have no way of limiting their trust in the underlying operating 
system (OS), leaving them at the complete mercy of an attacker who gains control over the OS. In this work, 
we describe the design and implementation ... 
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Dynamic capacity provisioning is a useful technique for handling the multi-time-scale variations seen in 
Internet workloads. In this article, we propose a novel dynamic provisioning technique for multi-tier Internet 
applications that employs (1) a flexible ... 
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Virtual machines are widely accepted as a promising basis for building secure systems. However, while virtual 
machines offer effective mechanisms to create isolated environments, mechanisms that offer controlled 
interaction among VMs are immature. Some ... 
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We propose a processor virtualization architecture, VIRTUS, to provide a dedicated domain for preinstalled 
applications and virtualized domains for downloaded native applications. With it, security-oriented next- 
generation mobile terminals can provide ... 
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Resin is a new language runtime that helps prevent security vulnerabilities, by allowing programmers to 
specify application-level data flow assertions. Resin provides policy objects, which programmers use to 
specify assertion code and metadata; data ... 
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Due to the imperative need to reduce the costs of management, power and cooling in large data centers, 
operators multiplex several concurrent applications on each physical server of a server farm connected to a 
shared network attached storage. Determining ... 
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As multi-core architectures flourish in the marketplace, multi-application workload scenarios (such as server 
consolidation) are growing rapidly. When running multiple applications simultaneously on a platform, it has 
been shown that contention for shared ... 
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As we enter the era of CMP platforms with multiple threads/ cores on the die, the diversity of the 
simultaneous workloads running on them is expected to increase. The rapid deployment of virtualization as a 
means to consolidate workloads on to a single ... 
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We present a flexible architecture for trusted computing, called Terra, that allows applications with a wide 
range of security requirements to run simultaneously on commodity hardware. Applications on Terra enjoy 
the semantics of running on a separate, ... 
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As more and more cores are enabled on the die of future CMP platforms, we expect that several diverse 
workloads will run simultaneously on the platform. A key example of this trend is the growth of virtualization 
usage models. When multiple virtual machines ... 



17 Fiicker: an g»k = 

m. : " •:- •••• ■ '•• : ;-, ' ■ ■. \ -■ - 

April Eurosys '08: Proceedings of the 3rd ACM SIGOPS/EuroSys European Conference on Computer 
2008 Systems 2008 
Publisher: ACM 

Full text available: ||Pd| (322.80 Additional information: tuil citaaor, ab-r-act. ^te-.er,,^, indt-x «rrr<3 
KB) 

Bibliometrics: Downloads (6 Weeks): 20, Downloads (12 Months): 173, Downloads (Overall): 430, Citation Count: 1 



We present Flicker, an infrastructure for executing security-sensitive code in complete isolation while trusting 
as few as 250 lines of additional code. Flicker can also provide meaningful, fine-grained attestation of the 
code executed (as well as its ... 
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Use of stealth rootkit techniques to hide long-lived malicious processes is a current and alarming security 
issue. In this paper, we describe, implement, and evaluate a novel VMM-based hidden process detection and 
identification service called Lycosid ... 



Keywords: inference, ; 



Full text available: ^ (633.50 Additional | nformation s 



Bibliometrics: Downloads (6 Weeks): 20, Downloads (12 Months): 128, Downloads (Overall): 128, Citation Count: 0 



As we embrace the era of chip multi-processors (CMP), we are faced with two major architectural challenges: 
(i) QoS or performance management of disparate applications running on CPU cores contending for shared 
cache/memory resources and (ii) global/local ... 
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Maintenance is the dominant source of downtime at high availability sites. Unfortunately, the dominant 
mechanism for reducing this downtime, cluster rolling upgrade, has two shortcomings that have prevented its 
broad acceptance. First, cluster-style ... 
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